@treenity/core 1.0.48 → 3.0.1

package/dist/server/factory.js

@@ -0,0 +1,89 @@
+// treenity() — universal server factory
+// Single entry point: loads infrastructure, mods, builds pipeline, wires logging.
+import '#contexts/schema/index';
+import '#contexts/text/index';
+import '#schema/load';
+import './mount-adapters';
+import { startServices } from '#contexts/service/index';
+import { A, createNode, R, S, W } from '#core';
+import { addOnLog, makeLogPath } from '#log';
+import { loadAllMods } from '#mod';
+import { createMemoryTree } from '#tree';
+import { deploySeedPrefabs } from './prefab';
+import { createEnsure } from './seed';
+import { createHttpServer, createPipeline } from './server';
+export async function treenity(config) {
+    const dataDir = config?.dataDir ?? './data';
+    const autostart = config?.autostart ?? true;
+    // 1. Load mods
+    if (config?.modsDir !== false) {
+        const extraDirs = config?.modsDir ? [config.modsDir] : [];
+        await loadAllMods('server', ...extraDirs);
+    }
+    // 2. Bootstrap: root node
+    const bootstrap = createMemoryTree();
+    let rootNode;
+    if (config?.rootNode) {
+        rootNode = config.rootNode;
+    }
+    else {
+        rootNode = createNode('/', 'root', {}, {
+            mount: { $type: 't.mount.overlay', layers: ['base', 'work'] },
+            base: { $type: 't.mount.fs', root: dataDir + '/base' },
+            work: { $type: 't.mount.fs', root: dataDir + '/work' },
+        });
+        rootNode.$acl = [
+            { g: 'authenticated', p: R | S },
+            { g: 'admins', p: R | W | A | S },
+        ];
+    }
+    await bootstrap.set(rootNode);
+    // 3. Build pipeline
+    const pipeline = createPipeline(bootstrap);
+    const { store, mountable } = pipeline;
+    // 4. Seed — if rootNode declares seeds, only deploy those mods
+    if (config?.seed) {
+        await config.seed(mountable, createEnsure(mountable));
+    }
+    else {
+        const seedFilter = rootNode.seeds;
+        await deploySeedPrefabs(mountable, seedFilter);
+    }
+    // 5. Wire log → tree
+    addOnLog(entry => {
+        const p = makeLogPath();
+        // process.stderr.write(`[log→tree] ${p} ${entry.level}: ${entry.msg.slice(0, 60)}\n`)
+        mountable.set({ $path: p, $type: 't.log', ...entry })
+            .catch(e => process.stderr.write(`[log write err] ${e.message}\n`));
+    });
+    // 6. Autostart services
+    let serviceHandle = null;
+    if (autostart) {
+        serviceHandle = await startServices(store, store.subscribe.bind(store));
+    }
+    const stop = async () => {
+        await serviceHandle?.stop();
+    };
+    return {
+        store: pipeline.store,
+        mountable: pipeline.mountable,
+        watcher: pipeline.watcher,
+        router: pipeline.router,
+        createContext: pipeline.createContext,
+        stop,
+        async listen(port = 3211, opts) {
+            const host = opts?.host ?? '127.0.0.1';
+            const server = createHttpServer(pipeline, {
+                allowedOrigins: opts?.allowedOrigins,
+                staticDir: opts?.staticDir,
+            });
+            return new Promise((resolve) => {
+                server.listen(port, host, () => {
+                    console.log(`treenity ${host}:${port}`);
+                    resolve(server);
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=factory.js.map

package/dist/server/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/server/factory.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,kFAAkF;AAElF,OAAO,wBAAwB,CAAC;AAChC,OAAO,sBAAsB,CAAC;AAC9B,OAAO,cAAc,CAAC;AACtB,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAsB,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,CAAC,EAAE,UAAU,EAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAa,MAAM,OAAO,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAe,MAAM,QAAQ,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAiB,MAAM,UAAU,CAAC;AAwB3E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAuB;IACpD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC;IAE5C,eAAe;IACf,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,QAAkB,CAAC;IACvB,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;QACrB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;YACrC,KAAK,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;YAC7D,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,EAAE;YACtD,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,EAAE;SACvD,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,GAAG;YACd,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE;YAChC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE9B,oBAAoB;IACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;IAEtC,+DAA+D;IAC/D,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAI,QAAoC,CAAC,KAA6B,CAAC;QACvF,MAAM,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,qBAAqB;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,MAAM,CAAC,GAAG,WAAW,EAAE,CAAA;QACvB,sFAAsF;QACtF,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;aAClD,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,wBAAwB;IACxB,IAAI,aAAa,GAAyB,IAAI,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,aAAa,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAA8D,CAAC,CAAC;IACvI,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,aAAa,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,IAAI;QAEJ,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,IAAiB;YACzC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,WAAW,CAAC;YACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE;gBACxC,cAAc,EAAE,IAAI,EAAE,cAAc;gBACpC,SAAS,EAAE,IAAI,EAAE,SAAS;aAC3B,CAAC,CAAC;YACH,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;gBACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;oBAC7B,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;oBACxC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/main.d.ts

@@ -0,0 +1,2 @@
+import 'dotenv/config';
+//# sourceMappingURL=main.d.ts.map

package/dist/server/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/server/main.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC"}

package/dist/server/main.js

@@ -0,0 +1,19 @@
+import 'dotenv/config';
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { treenity } from './factory';
+// Lock CWD — no library may change it
+process.chdir = () => { throw new Error('process.chdir is forbidden'); };
+const rootPath = resolve(process.argv[2] || 'root.json');
+const rootNode = JSON.parse(await readFile(rootPath, 'utf-8'));
+const t = await treenity({ rootNode });
+const port = Number(process.env.PORT) || 3211;
+const host = process.env.HOST || '127.0.0.1';
+const server = await t.listen(port, { host });
+process.on('unhandledRejection', (err) => console.error('[UNHANDLED]', err));
+process.on('SIGTERM', async () => {
+    await t.stop();
+    server.close();
+    process.exit(0);
+});
+//# sourceMappingURL=main.js.map

package/dist/server/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/server/main.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,sCAAsC;AACtC,OAAO,CAAC,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC;AACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;AAE3E,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;AAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9C,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server/mcp.d.ts

@@ -0,0 +1,4 @@
+import type { Tree } from '#tree';
+import { type Server } from 'node:http';
+/** Create MCP HTTP server. Returns server handle for lifecycle management. */
+export declare function createMcpHttpServer(store: Tree, port: number): Server;

package/dist/server/mcp.js

@@ -0,0 +1,279 @@
+// Treenity MCP Server — exposes tree store as MCP tools
+// StreamableHTTP transport, stateless, token auth via ?token= or Authorization header
+import { createNode } from '#core';
+import { verifyViewSource } from '#mods/uix/verify';
+import { TypeCatalog } from '#schema/catalog';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createServer } from 'node:http';
+import { z } from 'zod/v3';
+import { executeAction } from './actions';
+import { buildClaims, resolveToken, withAcl } from './auth';
+import { deployPrefab } from './prefab';
+/** Compact YAML-like serializer — readable for LLMs, much less noisy than JSON */
+function yaml(val, depth = 0, maxStr = 300) {
+    const pad = '  '.repeat(depth);
+    if (val == null)
+        return 'null';
+    if (typeof val === 'boolean' || typeof val === 'number')
+        return String(val);
+    if (typeof val === 'string') {
+        if (maxStr < Infinity && val.length > maxStr)
+            return JSON.stringify(val.slice(0, maxStr) + '…');
+        return /[\n\r:#\[\]{}",]/.test(val) || val === '' ? JSON.stringify(val) : val;
+    }
+    if (Array.isArray(val)) {
+        if (!val.length)
+            return '[]';
+        if (val.every(v => typeof v !== 'object' || v == null)) {
+            const inline = `[${val.map(v => yaml(v, 0, maxStr)).join(', ')}]`;
+            if (inline.length < 80)
+                return inline;
+        }
+        return val.map(item => {
+            if (typeof item !== 'object' || item == null)
+                return `${pad}- ${yaml(item, 0, maxStr)}`;
+            const inner = yaml(item, depth + 1, maxStr);
+            const lines = inner.split('\n');
+            return lines.length === 1
+                ? `${pad}- ${lines[0].trimStart()}`
+                : `${pad}- ${lines[0].trimStart()}\n${lines.slice(1).map(l => `${pad}  ${l.trimStart()}`).join('\n')}`;
+        }).join('\n');
+    }
+    if (typeof val === 'object') {
+        const entries = Object.entries(val);
+        if (!entries.length)
+            return '{}';
+        return entries.map(([k, v]) => {
+            if (v != null && typeof v === 'object') {
+                const inner = yaml(v, depth + 1, maxStr);
+                if (!inner.includes('\n') && inner.length < 60)
+                    return `${pad}${k}: ${inner.trimStart()}`;
+                return `${pad}${k}:\n${inner}`;
+            }
+            return `${pad}${k}: ${yaml(v, 0, maxStr)}`;
+        }).join('\n');
+    }
+    return String(val);
+}
+const text = (s) => ({ content: [{ type: 'text', text: s }] });
+const catalog = new TypeCatalog();
+/** Count non-system fields on a node */
+function dataKeys(node) {
+    return Object.keys(node).filter(k => !k.startsWith('$'));
+}
+async function buildMcpServer(store, session, claims) {
+    claims ??= await buildClaims(store, session.userId);
+    const aclStore = withAcl(store, session.userId, claims);
+    const mcp = new McpServer({ name: 'treenity', version: '1.0.0' });
+    mcp.registerTool('get_node', {
+        description: 'Read a node by path. Returns full untruncated values.',
+        inputSchema: { path: z.string() },
+    }, async ({ path }) => {
+        const node = await aclStore.get(path);
+        return text(node ? yaml(node, 0, Infinity) : `not found: ${path}`);
+    });
+    mcp.registerTool('list_children', {
+        description: 'List children of a node. Long string values may be truncated — use get_node for full data.',
+        inputSchema: {
+            path: z.string(),
+            depth: z.number().optional(),
+            detail: z.boolean().optional().describe('Show first-level fields and component types'),
+            full: z.boolean().optional().describe('Return complete YAML of each node'),
+        },
+    }, async ({ path, depth, detail, full }) => {
+        const ctx = { queryContextPath: path, userId: session.userId };
+        const result = await aclStore.getChildren(path, { depth }, ctx);
+        const { items, total } = result;
+        if (full)
+            return text(yaml({ total, items }));
+        if (detail) {
+            const lines = items.map(n => {
+                const name = n.$path.split('/').at(-1);
+                const keys = dataKeys(n);
+                const header = n.$type === 'dir' ? `${name}/` : `${name}: ${n.$type}  [${keys.length}]`;
+                const fields = keys.map(k => {
+                    const v = n[k];
+                    if (v && typeof v === 'object' && '$type' in v)
+                        return `  ${k}: ${v.$type}`;
+                    if (Array.isArray(v))
+                        return `  ${k}: [${v.length}]`;
+                    const s = String(v);
+                    return `  ${k}: ${s.length > 60 ? s.slice(0, 60) + '…' : s}`;
+                });
+                return header + (fields.length ? '\n' + fields.join('\n') : '');
+            });
+            return text(lines.join('\n') + `\n(${total} total)`);
+        }
+        // Default: ls-like — name, type, field count
+        const lines = items.map(n => {
+            const name = n.$path.split('/').at(-1);
+            if (n.$type === 'dir')
+                return `${name}/`;
+            return `${name}  ${n.$type}  [${dataKeys(n).length}]`;
+        });
+        return text(lines.join('\n') + (total > items.length ? `\n(${total} total)` : ''));
+    });
+    mcp.registerTool('set_node', {
+        description: 'Create or update a node',
+        inputSchema: {
+            path: z.string(),
+            type: z.string(),
+            components: z.record(z.unknown()).optional(),
+            acl: z.array(z.object({ g: z.string(), p: z.number() })).optional(),
+            owner: z.string().optional(),
+        },
+    }, async ({ path, type, components, acl, owner }) => {
+        const existing = await aclStore.get(path);
+        const node = existing ?? createNode(path, type);
+        if (!existing)
+            node.$type = type;
+        if (components) {
+            for (const [k, v] of Object.entries(components)) {
+                if (k === '__proto__' || k === 'constructor' || k === 'prototype')
+                    continue;
+                // LLMs often wrap node-level fields in a component matching the node $type.
+                // Flatten: merge as plain fields instead of creating a redundant component.
+                const comp = v;
+                if (comp && typeof comp === 'object' && comp.$type === type) {
+                    for (const [fk, fv] of Object.entries(comp)) {
+                        if (fk !== '$type')
+                            node[fk] = fv;
+                    }
+                    continue;
+                }
+                node[k] = v;
+            }
+        }
+        if (acl)
+            node.$acl = acl;
+        if (owner)
+            node.$owner = owner;
+        await aclStore.set(node);
+        return text(yaml(node));
+    });
+    mcp.registerTool('execute', {
+        description: 'Execute an action on a node or component. Actions are methods registered on types.',
+        inputSchema: {
+            path: z.string(),
+            action: z.string(),
+            type: z.string().optional(), // component $type for verification/scan
+            key: z.string().optional(), // component field key for direct lookup
+            data: z.record(z.unknown()).optional(),
+        },
+    }, async ({ path, action, type, key, data }) => {
+        const result = await executeAction(aclStore, path, type, key, action, data);
+        return text(yaml(result ?? { ok: true }));
+    });
+    mcp.registerTool('deploy_prefab', {
+        description: 'Deploy a module prefab (node tree template) to a target path. Idempotent: skips existing nodes. Browse available prefabs via list_children /sys/mods.',
+        inputSchema: {
+            source: z.string().describe('Prefab path: /sys/mods/{mod}/prefabs/{name}'),
+            target: z.string().describe('Target path where nodes will be created'),
+            allowAbsolute: z.boolean().optional().describe('Allow prefab to write outside target (e.g. /sys/autostart refs). Default: false'),
+        },
+    }, async ({ source, target, allowAbsolute }) => {
+        const result = await deployPrefab(aclStore, source, target, { allowAbsolute });
+        return text(yaml(result));
+    });
+    mcp.registerTool('compile_view', {
+        description: 'Verify that a UIX view source compiles correctly. Pass path to check an existing type node, or source to verify before writing.',
+        inputSchema: {
+            path: z.string().optional().describe('Path to type node (e.g. /sys/types/cosmos/system) — reads view.source'),
+            source: z.string().optional().describe('Raw JSX/TSX source to verify directly'),
+        },
+    }, async ({ path, source }) => {
+        let code = source;
+        if (!code) {
+            if (!path)
+                return text('error: provide path or source');
+            const node = await aclStore.get(path);
+            if (!node)
+                return text(`not found: ${path}`);
+            code = node?.view?.source;
+            if (!code || typeof code !== 'string')
+                return text(`no view.source on ${path}`);
+        }
+        const result = verifyViewSource(code);
+        return text(yaml(result));
+    });
+    mcp.registerTool('remove_node', {
+        description: 'Remove a node by path',
+        inputSchema: { path: z.string() },
+    }, async ({ path }) => {
+        const ok = await aclStore.remove(path);
+        return text(ok ? `removed: ${path}` : `not found: ${path}`);
+    });
+    // ── Discovery tools — powered by TypeCatalog ──
+    mcp.registerTool('catalog', {
+        description: 'List all registered types with title, properties, and action names. Use this first to discover what types exist.',
+        inputSchema: {},
+    }, async () => text(yaml(catalog.list())));
+    mcp.registerTool('describe_type', {
+        description: 'Get full schema of a type: properties, actions with argument types, and cross-references to other types. Use after catalog to understand a specific type deeply.',
+        inputSchema: { type: z.string().describe('Type name, e.g. "cafe.contact" or "board.task"') },
+    }, async ({ type: typeName }) => {
+        const desc = catalog.describe(typeName);
+        return text(desc ? yaml(desc) : `type not found: ${typeName}`);
+    });
+    mcp.registerTool('search_types', {
+        description: 'Search types by keyword across names, titles, property names, and action names. Use to find types relevant to a task.',
+        inputSchema: { query: z.string().describe('Search keyword, e.g. "order", "mail", "contact"') },
+    }, async ({ query }) => text(yaml(catalog.search(query))));
+    return mcp;
+}
+function extractToken(req) {
+    const auth = req.headers.authorization;
+    if (typeof auth === 'string' && auth.startsWith('Bearer '))
+        return auth.slice(7);
+    const qs = (req.url ?? '').split('?')[1];
+    if (qs) {
+        const match = qs.match(/(?:^|&)token=([^&]+)/);
+        if (match)
+            return decodeURIComponent(match[1]);
+    }
+    return null;
+}
+/** Create MCP HTTP server. Returns server handle for lifecycle management. */
+export function createMcpHttpServer(store, port) {
+    const server = createServer(async (req, res) => {
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, mcp-session-id');
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        const url = (req.url ?? '/').split('?')[0];
+        if (url !== '/mcp') {
+            res.writeHead(404);
+            res.end('not found');
+            return;
+        }
+        // Auth: token from ?token= or Authorization header
+        // Dev mode: localhost without TENANT gets admin session (no token needed)
+        const token = extractToken(req);
+        let session = null;
+        let devClaims;
+        if (token) {
+            session = await resolveToken(store, token);
+        }
+        else if (!process.env.TENANT) {
+            session = { userId: 'mcp-dev' };
+            devClaims = ['u:mcp-dev', 'authenticated', 'admins'];
+        }
+        if (!session) {
+            res.writeHead(401, { 'Content-Type': 'text/plain' });
+            res.end('token required (?token= or Authorization: Bearer)');
+            return;
+        }
+        // Stateless: fresh transport + server per request, ACL-wrapped
+        const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+        const mcp = await buildMcpServer(store, session, devClaims);
+        await mcp.connect(transport);
+        await transport.handleRequest(req, res);
+    });
+    server.listen(port, '127.0.0.1', () => console.log(`treenity mcp :${port}`));
+    return server;
+}

package/dist/server/migrate.d.ts

@@ -0,0 +1,3 @@
+import type { Tree } from '#tree';
+export declare function withMigration(store: Tree): Tree;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/server/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/server/migrate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAmClC,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAoB/C"}

package/dist/server/migrate.js

@@ -0,0 +1,56 @@
+// Per-type schema migration — normalizes nodes on read, stamps $v on write.
+// Migrations registered via: register(type, 'migrate', { 1: fn, 2: fn })
+// Absent $v = version 0. Migration functions mutate the node clone in-place.
+// NOTE: not wired into pipeline yet — will be added between validated and subscriptions
+import { resolveExact } from '#core';
+function getMigrations(type) {
+    const handler = resolveExact(type, 'migrate');
+    if (!handler)
+        return null;
+    const migrations = handler();
+    const keys = Object.keys(migrations).map(Number).sort((a, b) => a - b);
+    if (!keys.length)
+        return null;
+    return { migrations, version: keys[keys.length - 1] };
+}
+function migrateNode(node) {
+    const m = getMigrations(node.$type);
+    if (!m)
+        return node;
+    const nodeV = node['$v'] ?? 0;
+    if (nodeV >= m.version)
+        return node;
+    const clone = structuredClone(node);
+    for (const [v, fn] of Object.entries(m.migrations).sort(([a], [b]) => +a - +b)) {
+        if (+v > nodeV)
+            fn(clone);
+    }
+    clone['$v'] = m.version;
+    return clone;
+}
+function stampVersion(node) {
+    const m = getMigrations(node.$type);
+    if (!m)
+        return;
+    node['$v'] = m.version;
+}
+export function withMigration(store) {
+    return {
+        ...store,
+        async get(path, ctx) {
+            const node = await store.get(path, ctx);
+            if (!node)
+                return node;
+            return migrateNode(node);
+        },
+        async getChildren(path, opts, ctx) {
+            const page = await store.getChildren(path, opts, ctx);
+            return { ...page, items: page.items.map(migrateNode) };
+        },
+        async set(node, ctx) {
+            stampVersion(node);
+            return store.set(node, ctx);
+        },
+    };
+}
+//# sourceMappingURL=migrate.js.map

package/dist/server/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/server/migrate.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,wFAAwF;AAExF,OAAO,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAC;AAMpD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,UAAU,GAAG,OAAO,EAAgB,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,MAAM,KAAK,GAAI,IAAI,CAAC,IAAI,CAAY,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,CAAC,GAAG,KAAK;YAAE,EAAE,CAAC,KAAgC,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAW;IACvC,OAAO;QACL,GAAG,KAAK;QAER,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG;YACjB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;YAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG;YACjB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/mod-catalog.d.ts

@@ -0,0 +1,14 @@
+import type { ModState } from '#mod/types';
+import type { CatalogEntry } from '#schema/catalog';
+export type ModInfo = {
+    name: string;
+    state: ModState;
+    error?: string;
+    types: CatalogEntry[];
+    prefabs: string[];
+};
+/** Get rich info for a single mod (works for loader AND prefab-only mods) */
+export declare function getModInfo(name: string): ModInfo;
+/** Get info for all known mods (loader + prefab registry) */
+export declare function getAllMods(): ModInfo[];
+//# sourceMappingURL=mod-catalog.d.ts.map

package/dist/server/mod-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod-catalog.d.ts","sourceRoot":"","sources":["../../src/server/mod-catalog.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAIF,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhD;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,IAAI,OAAO,EAAE,CAItC"}

package/dist/server/mod-catalog.js

@@ -0,0 +1,40 @@
+// Mod Catalog — synthesizes rich mod info from loader + tracking + TypeCatalog + prefabs
+// Pure functions, no store deps.
+import { getLoadedMods } from '#mod/loader';
+import { getModPrefabs, getRegisteredMods } from '#mod/prefab';
+import { getTypesForMod, inferModFromType } from '#mod/tracking';
+import { TypeCatalog } from '#schema/catalog';
+const catalog = new TypeCatalog();
+/** Get rich info for a single mod (works for loader AND prefab-only mods) */
+export function getModInfo(name) {
+    const loaded = getLoadedMods().find(m => m.name === name);
+    return buildModInfo(name, loaded?.state ?? 'loaded', loaded?.error);
+}
+/** Get info for all known mods (loader + prefab registry) */
+export function getAllMods() {
+    const names = new Set(getLoadedMods().map(m => m.name));
+    for (const n of getRegisteredMods())
+        names.add(n);
+    return [...names].map(n => getModInfo(n));
+}
+function buildModInfo(name, state, error) {
+    // Tracked types first
+    const tracked = getTypesForMod(name);
+    const trackedSet = new Set(tracked);
+    // Convention fallback: catalog types whose inferred mod matches
+    const allTypes = catalog.list();
+    const conventionTypes = allTypes.filter(e => !trackedSet.has(e.name) && inferModFromType(e.name) === name);
+    const types = [
+        ...allTypes.filter(e => trackedSet.has(e.name)),
+        ...conventionTypes,
+    ];
+    const prefabs = getModPrefabs(name).map(([n]) => n);
+    return {
+        name,
+        state,
+        ...(error ? { error: error.message } : {}),
+        types,
+        prefabs,
+    };
+}
+//# sourceMappingURL=mod-catalog.js.map

package/dist/server/mod-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod-catalog.js","sourceRoot":"","sources":["../../src/server/mod-catalog.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,iCAAiC;AAEjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAU9C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1D,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAe,EAAE,KAAa;IAChE,sBAAsB;IACtB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAEpC,gEAAgE;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAClE,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,GAAG,eAAe;KACnB,CAAC;IAEF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI;QACJ,KAAK;QACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/server/mods-mount.d.ts

@@ -0,0 +1,3 @@
+import { type Tree } from '#tree';
+export declare function createModsStore(_backingStore: Tree, modsPath?: string): Tree;
+//# sourceMappingURL=mods-mount.d.ts.map

package/dist/server/mods-mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mods-mount.d.ts","sourceRoot":"","sources":["../../src/server/mods-mount.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAY,KAAK,IAAI,EAAE,MAAM,OAAO,CAAC;AAU5C,wBAAgB,eAAe,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,SAAc,GAAG,IAAI,CAsJjF"}